Files
smom-dbis-138/config/omnl-customer-security.production.v1.json
zaragoza444 5229c2d888
Some checks failed
CI/CD Pipeline / Solidity Contracts (push) Failing after 1m13s
CI/CD Pipeline / Lint and Format (push) Has been cancelled
CI/CD Pipeline / Security Scanning (push) Has been cancelled
CI/CD Pipeline / Terraform Validation (push) Has been cancelled
CI/CD Pipeline / Kubernetes Validation (push) Has been cancelled
Deploy ChainID 138 / Deploy ChainID 138 (push) Has been cancelled
HYBX OMNL TypeScript & anchor / token-aggregation build + reconcile artifact (push) Has been cancelled
Validation / validate-genesis (push) Has been cancelled
Validation / validate-terraform (push) Has been cancelled
Validation / validate-kubernetes (push) Has been cancelled
Validation / validate-smart-contracts (push) Has been cancelled
Validation / validate-security (push) Has been cancelled
Validation / validate-documentation (push) Has been cancelled
Verify Deployment / Verify Deployment (push) Has been cancelled
fix(omnl): production blockers for M0-M4 settlement stack
Exempt dashboard read APIs from anonymous rate limits, preserve nginx-injected auth, wire chain-mint and DB env through deploy/LXC scripts, resolve M3 token addresses from registry, and harden super-admin seeding.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-29 06:47:20 -07:00

35 lines
1.1 KiB
JSON

{
"version": "1.0.0",
"production": true,
"neverExposeOperatorKeyInBrowser": true,
"portalInjectAuthViaNginx": true,
"requireApiKeyAllExchangeRoutes": true,
"customerAllowedScopes": ["read", "trade"],
"superAdminOnlyScopes": ["settle", "token_load", "transfer", "admin"],
"rateLimits": {
"customerPerMinute": 30,
"superAdminPerMinute": 120,
"anonymousPerMinute": 30
},
"corsOrigins": [
"https://secure.d-bis.org",
"https://online.omdnl.org",
"https://office24.omdnl.org",
"https://digital.omdnl.org",
"https://exchange.d-bis.org",
"https://exchange.omdnl.org",
"https://forex.omdnl.org"
],
"publicEndpoints": [
"/health",
"/health/ledger",
"/money-supply/public",
"/public/money-supply",
"/office",
"/tokens/m2",
"/chains",
"/chains/active"
],
"notes": "Customer keys: OMNL_CUSTOMER_API_KEYS=key:read|trade or OMNL_CUSTOMER_API_KEY_1..3. Super-admin keys: OMNL_SUPER_ADMIN_*_KEY in config/omnl-super-admins.v1.json. Portal browsers use nginx-injected auth — never VITE_OMNL_API_KEY."
}